Effective February 29, 2024
a. Subject matter of this Policy is collection, consent, processing, rectification and erasure of personal data provided by You, Your customers or authorised dealers (“Data Principal” or “You” or “Your”) or obtained from the Data Principal themselves by SingleInterface (“Data Processor” or “Us” or “Our”) on behalf of Your customers or authorised dealers (“Data Subjects”) to the extent necessary for the performance of services in accordance with the Master Service Agreement (hereinafter “Commissioned Processing”).
b. Any Personal / sensitive Personal Data provided by You or Your customers to Us and used by Our associates directly or indirectly in performing its obligations under Our Master Service Agreement shall, at all times, remain Your property. It shall be identified, marked clearly and recorded as such by the Data Processor on all media and in all documentations.
c. The Data Processor shall process the Personal / Sensitive Personal Data exclusively for the purpose of performing the Commissioned Processing in accordance with the Master Service Agreement, the applicable data protection law and the instructions of Data Principal and not for any other purposes, in particular not for its own business purposes, unless required to do so by applicable law to which the Data Processor is subject; in such a case, the Data Processor shall notify You of that legal requirement before processing, unless that law prohibits such notification on important grounds of public interest.
d. The Data Processor is not entitled to create copies of the Personal / Sensitive Personal Data without Your prior written approval. This shall not apply for backup copies which are necessary to ensure proper data processing, to comply with statutory access or retention requirements or for the purpose of preserving evidence.
e. The associates of the Data Processor shall be trained appropriately to ensure they could take necessary precautions to preserve the integrity and prevent any corruption or loss, damage or destruction of the Personal / sensitive Personal Data provided by You. The Data Processor shall label the data adequately. If the data are processed for different purposes, the Data Processor shall label the data with the respective purpose.
f. The Data Processor shall inform You without undue delay about all cases of severe operational interruptions, suspected breaches of data protection obligations or other irregularities in connection with the processing of data.
g. The Data Processor shall inform You without undue delay about current communications between supervisory authorities and the Data Processor to the extent that the data processing under the Master Service Agreement is concerned. The Data Processor shall inform You without undue delay about orders, investigations and other actions by the supervisory authorities. The Data Processor shall provide information to third parties and supervisory authorities only upon prior consultation with You.
h. The Data Processor ensures that the persons authorized to process the Data have committed themselves to confidentiality or are subject to an appropriate statutory obligation of confidentiality, and that these persons have been made familiar with the provisions relating to data protection relevant to them. This confidentiality obligation shall survive the contracted services.
i. The Data Processor shall support You at no cost in responding to requests for exercising the Data Subject's request to rectify, erase or restrict processing to a reasonable extent and, whenever possible, by appropriate technical and organizational measures.
j. In the event of expiry / termination of Your Master Service Agreement the Data Processor shall, instruct all its associates and other personnel of the Data Processor to, erase all the Personal / Sensitive Personal Data provided by You and / or the Data Subject unless otherwise mentioned in the applicable governing law.
THIS DATA PROTECTION POLICY SHALL FORM INTEGRAL PART OF THE MASTER SERVICE AGREEMENT EXECUTED BETWEEN YOU AND SINGLEINTERFACE.